Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8243559

Remove root certificates with 1024-bit keys

    XMLWordPrintable

Details

    Backports

      Description

        There are 5 roots with 1024-bit keys in the JDK cacerts keystore. Their keystore aliases and Distinguished Names are as follows:

        1. thawtepremiumserverca

        EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA

        2. verisignclass2g2ca

        OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US

        3. verisignclass3ca

        OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US

        4. verisignclass3g2ca

        OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US

        5. verisigntsaca

        CN=Thawte Timestamping CA, OU=Thawte Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8256903 Remove root certificates with 1024-bit keys

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8256996 Remove root certificates with 1024-bit keys

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8256997 Remove root certificates with 1024-bit keys

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8262078 Remove root certificates with 1024-bit keys

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8262855 Remove root certificates with 1024-bit keys

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8263662 Remove root certificates with 1024-bit keys

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8263664 Remove root certificates with 1024-bit keys

            • P3 - Major loss of function.
            • Resolved
            csr for

            CSR - null JDK-8256502 Remove root certificates with 1024-bit keys

            • P3 - Major loss of function.
            • Closed
            duplicates

            Enhancement - null JDK-8225071 Remove two Digicert root certificates that are expiring in January 2021

            • P3 - Major loss of function.
            • Resolved
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8243493 Tools shouldn't warn for weak algorithms in cacerts

            • P3 - Major loss of function.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-8255402 Warnings generated for JDK cacerts keystore

            • P3 - Major loss of function.
            • Closed

            Enhancement - null JDK-8195793 Remove GTE CyberTrust Global Root

            • P3 - Major loss of function.
            • Resolved
            links to

            Commit Commit openjdk/jdk13u-dev/422eb196

            Commit Commit openjdk/jdk/dbfeb90d

            Review Review openjdk/jdk13u-dev/130

            Review Review openjdk/jdk/1387

            There are no Sub-Tasks for this issue.

            Activity

              People

                mullan Sean Mullan
                mullan Sean Mullan
                Votes:
                1 Vote for this issue
                Watchers:
                10 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: